← Back to all services Workshop

AI risk appetite

  • Half day
  • For Executives · For Boards
  • On site

A half-day workshop in which the people who set risk appetite do so for AI. Using real cases from your company, the group decides where you will and will not use AI, at what threshold a person must decide, and what is escalated to the executive team or the board. You leave with a one-page draft AI risk appetite.

Is this for you?

Who it is for

The body that sets risk appetite: the executive team, the board or its risk or audit committee, or both together, joined by your risk and legal leaders. Because limits must be agreed by the people who own the risk, this workshop is not offered to individual participants.

Group size

4 to 16 participants.

Prior knowledge

None required. Helpful: AI agents and your organization or AI risks & opportunities.

Core objectives

  1. 01Classify AI uses by their impact on customers, employees, finances, legal position, reputation and safety
  2. 02Set the red lines: the uses you will not allow
  3. 03Set the thresholds at which a person must make the decision
  4. 04Agree what is escalated, and link it to your existing risk framework
Why it matters

Most companies already use AI in more places than leadership knows.

Without agreed limits, every new use becomes a debate, or nobody asks at all. The stakes are real: under the EU AI Act, using AI in ways the law prohibits can lead to fines of up to €35 million or 7% of worldwide annual turnover, whichever is higher.

Source: EU AI Act, Regulation (EU) 2024/1689, Article 99(3)

How it works

BeforeInterviews and a list of AI uses
  1. 01 How risk appetite works for AI
  2. 02 Dilemmas from your company
  3. 03 Thresholds and escalation
  4. 04 Agreed wording

The workshop starts with how risk appetite works for AI, then works through dilemmas taken from your own company, sets thresholds and escalation, and ends with agreed wording. Before the session, we hold three or four interviews and collect a list of the AI uses you know of. The workshop runs in person, because limits are best agreed face to face.

Deliverables

  • A one-page draft AI risk appetite statement
  • A classification grid: allowed, allowed with conditions, not allowed
  • Decision thresholds where a person decides
  • An escalation matrix